Cisco Small Business SPA500 Series IP Phones Local Command Execution Vulnerability

A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to improper input validation in the device configuration interface. An attacker could exploit this vulnerability by...

CVE-2019-10632

A directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5.21 and below allows a lower privileged user to change the location of any other user's files...

Zyxel NAS 326 Plaintext Password Vulnerability

The Zyxel NAS 326 is a two-drive personal cloud storage device from Zyxel Hopscotch. A plaintext password vulnerability exists in Zyxel NAS 326 version 5.21 and earlier. A user with elevated privileges can exploit the vulnerability to obtain the administrator password of the device...

Drobo 5N2 Improper Access Control Vulnerability (CNVD-2019-05930)

The Drobo 5N2 NAS is a networked storage appliance NAS from Drobo, USA. The device features data sharing, data backup, remote access and disaster recovery. An access control error vulnerability exists in the /mysql/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115. An attacker cou...

Quantum storage devices may have a known Linux bug

Challenge To identify if a known linux bug is the cause for errors on a backup repository. Cause You will see a job fail with "unable to mkdir /var/log/sudo-io : File exists", this is caused by a bug in some versions of the sudo application. Solution Some quantum storage device's operating system...

The vulnerability of the microprogrammed software of the Digizo ShAirDisk PTW-WMS1 mobile disk drive lies in its authentication procedures’ deficiencies, allowing an intruder to gain access to the device with root privileges.

The vulnerability of the microprogrammed wireless mobile disk storage device Digizo ShAirDisk PTW-WMS1 is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the device with root privileges...

LaCie Storage Device Detection

Binary data 700204.prm...

LaCie Storage Device Software Version Detection

Binary data 700206.prm...

LaCie Storage Device XML Config Detection

Binary data 700205.prm...

The vulnerability of the Windows Shell component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Windows Shell component of the Windows operating system is related to errors in the processing of LNK files. Exploiting this vulnerability allows a local attacker to execute arbitrary code by connecting a storage device to the system, which contains a specially crafted ic...

May 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

May 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 This update rollup is superseded by July 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 KB3172614 that was released on July 21, 2016. The May 2016 update rollup for Windows RT 8.1,...

Scientific Linux Security Update : util-linux on SL7.x x86_64 (20161103)

Security Fixes : - It was found that util-linux's libblkid library did not properly handle Extended Boot Record EBR partitions when reading MS-DOS partition tables. An attacker with physical USB access to a protected machine could insert a storage device with a specially crafted partition table...

Command injection vulnerability in WFS-SR01

Overview WFS-SR01 provided by I-O DATA DEVICE, INC. is a portable storage device which provides wireless LAN router function. WFS-SR01 contains command injection vulnerability in "Pocket Router Function". I-O DATA DEVICE, INC. reported this vulnerability to JPCERT/CC to notify users of its soluti...

NASdeluxe NDL-2400r Remote Command Injection Vulnerability

The NASdeluxe NDL-2400r is a NASdeluxe operating system for use in NAS networked storage devices. A remote command injection vulnerability exists in NASdeluxe NDL-2400r, which can be exploited by an attacker to execute arbitrary commands with root privileges...

Updated util-linux packages fix security vulnerability

The util-linux libblkid is vulnerable to a Denial of Service attack during MSDOS partition table parsing, in the extended partition boot record EBR. If the next EBR starts at relative offset 0, parsedosextended will loop until running out of memory. An attacker could install a specially crafted...

Linux kernel in a recursive exploit-vulnerability warning-the black bar safety net

6 on 1 Number, I have submitted a linux kernel in any recursion vulnerability. If the installed Ubuntu system when choosing a home directory encryption, the vulnerability to by a local user to trigger. If you want to know the exploit code and a short bit of the vulnerability report, please visit...

Microsoft Windows RDP Driver Information Leakage Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information leakage vulnerability exists in the Volume Manager Driver for Microsoft Windows, which originates when a USB disk mounted by the program using the Remote Desktop Protocol RDP is not...

Wireshark SCSI OSD Dissector 'packet-scsi-osd.c' Denial of Service Vulnerability

Wireshark is an open source network protocol analysis tool. An integer overflow in the dissectosd2cdbcontinuation function in the Wireshark SCSI OSD parser epan/dissectors/packet-scsi-osd.c allows attackers to exploit a vulnerability by submitting a special message to crash the application...

Vulnerability in JP1/NETM/DM and Job Management Partner 1/Software Distribution data reproduction functionality

Overview JP1/NETM/DM and Job Management Partner 1/Software Distribution contain a vulnerability that prevents them from disabling writing to built-in USB storage devices. Impact An attacker can exploit this vulnerability to prevent the affected products from disabling writing to built-in type USB...

Udisks及Udisks2长路径名本地栈缓冲区溢出漏洞

BUGTRAQ ID: 66081 CVE ID: CVE-2014-0004 Udisks及Udisks2提供了一个守护程序、D-Bus API及命令行工具，以管理磁盘和存储设备。 udisks及udisks2处理较长的路径名时在实现上存在本地栈缓冲区溢出漏洞，攻击者可利用该漏洞插件特制的目录结构，导致以root权限执行任意代码。 0 freedesktop udisks 厂商补丁： freedesktop ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.freedesktop.org/wiki/Software/udi...